added get_firewall_rules()